Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. I know that C/C++ code is hard to decompile. Can anyone tell me how do I find what vulnerabilities does the malware exploit without having to decompile the malware? I don't need an exact methodology. Even pointers to think would be helpful. Thanks.

share|improve this question

closed as too broad by Terry Chia, Xander, Noordung, tylerl, NULLZ Sep 7 '13 at 1:19

There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.

1 Answer 1

up vote 2 down vote accepted

There are two sort of malware analysis dynamic and static each has its own pros and cons. As you are trying to reverse engineer the malicious code you may require adequate machine language knowledge to analyze the code and identifying different routines. The second way is go with dynamic analysis by executing the code in the sandbox environment. There are few open source automated malware analysis tools like cukoo that can identify the threat data the malware is trying to exploit

share|improve this answer
    
Thanks a ton! I knew about static analysis but not about Cukoo. Installing now. :) –  TheRookierLearner Sep 6 '13 at 20:39

Not the answer you're looking for? Browse other questions tagged or ask your own question.